1. Who we are
Frontface Studios LLC operates FurrySMP, its Minecraft server network, furrysmp.net, store.furrysmp.net, and the related services described here (the "Services"). "We," "us," and "our" refer to Frontface Studios LLC.
We determine how personal information is used for operating our Services. Where applicable data protection law uses that term, we act as its controller. Tebex, Discord, and Microsoft also process information for their own services under their own policies.
Our two co-owners handle privacy enquiries at privacy@furrysmp.net.
This policy explains our practices and your rights. It is not a blanket request for consent to every activity described here.
2. Information we process
| Category | What it includes |
|---|---|
| Player and connection information | Minecraft usernames and UUIDs, IP addresses, connection timestamps, and session history. |
| In-game communications | Public chat, private in-game messages, group messages, and commands. |
| Gameplay replays | Per-player recordings of game packets, including world, entity, and in-game interface information, and the session's start and end times. These packets can be used to reconstruct the player's gameplay view. |
| Voice within replays | Simple Voice Chat audio handled by our recording system, including proximity, locational, group/non-directional audio, and the player's own transmitted microphone audio. |
| Moderation and support | Reports, ban records, appeals, support messages, and information supplied in those communications. |
| Store information | Basket details/identifiers, the most recent completed Tebex transaction identifier stored in a browser cookie, Minecraft account details, and package entitlements associated with your UUID. We also receive payment-event information from Tebex as explained in section 5. |
| Optional Discord linking | Your Discord ID associated with your Minecraft UUID, and the information needed to provide the linked features described in section 6. |
| Microsoft sign-in and request verification | When you sign in to our website or optionally to the store, we process authentication codes/tokens through Microsoft, Xbox, and Minecraft services to verify your Minecraft UUID and username. We then issue our own authentication token containing those details and an expiry time, stored in a browser cookie for 30 minutes. We also process information supplied to verify a privacy request. See section 9. |
We obtain information directly from you, automatically when you connect or use the Services, from communications with other players, and from Tebex, Discord, and Microsoft when the relevant features are used. Reports about you may contain information supplied by another player.
We do not retain the provider-issued authentication codes or Microsoft/Xbox/Minecraft access or refresh tokens after authentication. Apart from the verified Minecraft UUID and username, we do not retain additional provider account identifiers from that flow. Our own authentication token expires after 30 minutes. Hourly, we delete Game replays including Voice within replays that are at least 30 days old. Typical retention is therefore about 30 days after collection.
3. Gameplay and voice recording
Capture starts when you join the Minecraft network and stops when you disconnect. Recording is a required part of the network's moderation system; there is no unrecorded gameplay mode or private/group voice exemption.
The visual record is a packet replay. Our system does not capture your webcam or desktop screen and does not create a separate video stream. A replay viewer reconstructs gameplay from the recorded packets.
If you use Simple Voice Chat, the replay system records the voice audio it handles, including group chat and your own microphone audio transmitted through the mod. The recording system does not independently activate your microphone. Muting or not transmitting prevents your own new microphone audio from being sent, but does not stop gameplay capture or the recording of other audio handled during your session.
Messages described as "private" and group voice conversations are still subject to the logging described here. Such labels describe who participates in the conversation, not an exemption from network moderation records.
We use these recordings for moderation, investigating reports, enforcing network rules, and reviewing appeals. We do not use recordings from this system for advertising, promotional clips, social-media posts, or other promotional purposes.
4. Why we use information
We use information to:
- operate the network, associate activity with Minecraft accounts, and provide player features;
- maintain baskets and grant, update, or remove purchased entitlements in response to Tebex payment events;
- provide Discord features that you choose to enable;
- investigate misconduct, secure the network, enforce the limit of two accounts per player, identify possible alternate accounts and ban evasion, and review reports and appeals;
- answer support and privacy requests and verify the requester's authority; and
- meet applicable legal obligations and handle legal claims.
We do not use voice transcription, AI analysis, AI training, or biometric identification. We use account and IP information for the moderation purposes described above, rather than for advertising profiles.
Our payment-event rules operate automatically. Any payment refunded removes the entitlement and automatically banning the account associated with the issued refund. Opening a dispute does not by itself remove the entitlement or trigger the permanent ban described here. If Tebex reports that the dispute was lost, our current system removes the affected entitlement and permanently bans the associated player from the network. These rules use payment-event status and the associated account/entitlement information; they do not use AI. Apart from these payment-related rules, moderation decisions are reviewed by staff.
You can challenge a payment-related restriction through our appeal page and request staff review.
We do not use website analytics or advertising trackers, and we do not sell personal information or share it for cross-context behavioural advertising.
Where EEA or UK data protection law applies, the proposed purposes and legal bases are:
| Processing | Legal basis |
|---|---|
| Providing the account features or services you request | Performance of our agreement with you, where the processing is necessary for that agreement. |
| Security, proportionate moderation, fraud prevention, support, and legal claims | Our legitimate interests in providing a secure service, protecting participants, and administering and defending the business, subject to balancing those interests against your rights. |
| Compliance with applicable legal obligations | The relevant legal obligation. |
| Activities for which we request consent | Your consent, which can be withdrawn for future processing. |
5. Store and Tebex checkout
Our store uses Tebex's merchant-of-record arrangement. We manage product descriptions, baskets, prices, and in-game delivery. When you check out, we send Tebex your basket information, Minecraft username/UUID, and IP address, and redirect you to Tebex's checkout.
Tebex collects the information needed to take payment and administer the transaction. Tebex sends us payment-event notifications that may include transaction details, customer name and email address, country/postal code, IP address, payment status, and purchased products. Receiving and processing these notifications is distinct from storing them.
After processing a payment-event notification, our purchase-entitlement database retains the player's Minecraft UUID and package entitlements, rather than the full notification. We do not collect your full payment-card details through our store.
Tebex's own processing and retention are explained in its Privacy Policy. Requests to us do not automatically delete Tebex's separate transaction records.
6. Optional Discord integration
Linking Discord is optional. Use /discord link in-game to obtain a one-time code, then send that code to our Discord bot. Successful linking creates an association between your Discord ID and Minecraft UUID.
The link enables in-game event notifications by Discord direct message, synchronises your in-game rank with a Discord role, and enables an in-game Booster rank when you boost our Discord server. We process the relevant role or boosting status to operate these features.
Use /discord unlink to remove the association. Unlinking ends features that depend on the association; it does not delete separate reports, tickets, messages, or records held by Discord. Discord's processing is covered by its Privacy Policy.
Linking codes expire after 15 minutes. Our bot does not retain messages, role history, or boosting history beyond the active account association. Separate support tickets, community messages held by Discord, and moderation records are governed by their respective practices.
Linking-code records are deleted immediately after use or when their 15-minute validity period expires.
7. Cookies and basket storage
Our websites use cookies for shopping and sign-in. We do not use sessionStorage or localStorage.
The authentication cookie is created after successful Microsoft sign-in. It contains our token, not a retained Microsoft/Xbox/Minecraft provider token.
We do not use website analytics or advertising tracking tools. You can clear or block cookies through your browser settings, but doing so can clear your basket, sign you out, or prevent the related features from working. Tebex operates its own checkout and describes its practices in its own policy.
8. Access, service providers, and disclosures
Within our team, only authorised administrators can view gameplay replays and voice recordings. Other authorised staff can view IP addresses, session history, reports, and support tickets for their moderation and support duties. We use access restrictions and access logging.
Our infrastructure and service providers process information as needed to supply their services:
| Provider | Function |
|---|---|
| Aquahost, using OVH infrastructure | Minecraft hosting, network backups, and DDoS protection; the Minecraft machine is in Montreal, Canada. |
| Tebex | Checkout, merchant-of-record services, payment administration, and payment-event notifications. |
| Discord | Optional account linking, role/boosting integration, notifications, community messages, and support tickets. |
| Microsoft, including Xbox and Minecraft account services | Account sign-in for our website and optional store sign-in, including verification of Minecraft account control. |
| Cloudflare R2 | Private object storage for canvas schematics, encrypted gameplay replays, and short-lived staff export files. |
We also make active and expired punishment records publicly available at furrysmp.net/punishments. Each public record includes the punished player's username, the reason, the date issued, and the expiry date. Evidence, IP addresses, and the identity of the staff member who issued the punishment are excluded. Expired punishment entries are hidden from the public page six months after expiry, with earlier removal where appropriate. Entries for overturned or incorrectly issued punishments are hidden promptly. Public information can be viewed or copied by people outside the network.
We may disclose relevant information to people involved in a report or appeal where appropriate to investigate or communicate the outcome. This does not mean that everyone involved receives the full report, the reporter's identity, or an unredacted recording.
9. Your rights and requests
Depending on the law that applies, you may have rights to access, correct, delete, or receive a copy of your information, restrict its processing, withdraw consent, or appeal a decision about a request. Where applicable law grants safeguards for automated decisions, you may request human intervention, explain your position, and contest the decision.
Where applicable, you may object to processing based on our legitimate interests. We will consider the objection under the applicable legal standard. Withdrawing consent does not change the lawfulness of processing before withdrawal.
Email privacy@furrysmp.net. Our co-owners handle requests and respond within the applicable legal deadlines. We may ask for proportionate information to verify your identity or authority.
For Minecraft account requests, we may ask you to sign in with Microsoft on furrysmp.net or store.furrysmp.net to verify account control. Store sign-in is optional. We do not ask you to send us your Microsoft password or authentication-token values.
Parents, authorised representatives, and people unable to sign in can email privacy@furrysmp.net for an alternative verification process. Depending on the request, this may involve control of a previously linked account, independently verified transaction or prior support records, and evidence of authority to act for someone else. We ask only for information proportionate to the risk of the request and do not require government identification routinely.
Complete deletion of your player account includes its entitlement associations and can remove access to purchased benefits. We will explain that consequence before processing an account-deletion request. Requesting access, correction, or deletion of unrelated records does not itself require you to surrender your purchases.
A deletion request to us does not delete your Minecraft/Microsoft or Discord account or records that Tebex holds independently. Where a lawful exception applies, we may retain only the information needed for it and explain the applicable limitation.
If you disagree with our response, email privacy@furrysmp.net asking for review. You may also complain to the relevant data protection authority; UK users can contact the ICO. You do not have to complain to us first where your law permits a direct complaint.
10. Age restrictions
FurrySMP is not offered to children under 13. A higher minimum applies where required by applicable law. We do not knowingly allow people below the applicable minimum age to use the network or knowingly collect their information.
We do not currently operate an age-checking or age-verification process. If staff learn that a player is below the applicable minimum age, they restrict access to the Minecraft network and our Discord server. Staff may report a suspected violation of Discord's own age requirements to Discord.
If you believe a child below the applicable age has used the Services or provided information, contact privacy@furrysmp.net so we can investigate and take appropriate action, including restricting access and deleting information where required. Purchasing through Tebex and using Discord are also subject to those providers' eligibility requirements.
11. Changes and contact
We will post updated versions at https://furrysmp.net/privacy and update the effective date. For material changes, we will provide additional notice through appropriate service channels before the change where required. When a change requires new consent or other action, publishing a revised policy alone will not replace that requirement.
For questions or requests, contact Frontface Studios LLC at privacy@furrysmp.net.